First published: Thu Jul 03 2008(Updated: )
Multiple SQL injection vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Drupal Drupal | =5.4 | |
Drupal Aggregation Module | =3.2 | |
Drupal Drupal | =5.2 | |
Drupal Drupal | =5.7 | |
Drupal Drupal | =5.1_rev1.1 | |
Drupal Drupal | =5.0 | |
Drupal Aggregation Module | =4.0 | |
Drupal Aggregation Module | =4.1 | |
Drupal Aggregation Module | =4.3 | |
Drupal Aggregation Module | =4.2 | |
Drupal Drupal | =5.1 | |
Drupal Drupal | =5.3 | |
Drupal Aggregation Module | =3.1 | |
Drupal Drupal | =5.5. | |
Drupal Aggregation Module | =3.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-2999 is classified as a critical severity vulnerability.
To fix CVE-2008-2999, update the Drupal Aggregation module to a version that is not affected by this vulnerability.
Drupal versions 5.0 to 5.7 are affected by CVE-2008-2999.
CVE-2008-2999 allows remote attackers to execute arbitrary SQL commands, leading to potential database compromise.
Yes, CVE-2008-2999 specifically impacts the Aggregation module version 5.x before 5.x-4.4.